gameplayablecoin.xyz

This domain is flagged as a high-risk instance of brand impersonation targeting Base, a cryptocurrency platform. Analysis indicates the site mimics legitimate Base services under the fabricated name 'Game-Playable Coin (GPC),' likely to deceive users into engaging with fraudulent crypto transactions or disclosing sensitive credentials. The threat type is narrowly defined as brand impersonation with potential secondary objectives such as crypto asset theft or wallet compromise, given the absence of overt credential harvesting mechanisms in initial scans.

Infrastructure analysis reveals the domain gameplayablecoin.xyz was registered on February 21, 2026, through Ultahost, Inc., and resolves to the IP address 159.100.6.5, hosted in Germany under AS214036. The domain lacks an SSL certificate, increasing exposure to man-in-the-middle interception risks. VirusTotal reports 20 out of 95 security vendors flagging the domain as malicious, while it appears on four distinct security blocklists. The domain was proactively blocked by multiple detection systems, including browser-based and wallet-level protections, indicating broad consensus on its malicious nature. No legitimate historical use or redirection patterns were observed.

Mitigation steps for this brand impersonation threat include immediate blacklisting of the domain and its associated IP (159.100.6.5) across all network security controls. Organizations should update endpoint detection rules to flag any attempts to access gameplayablecoin.xyz or similar Base-themed domains, particularly those using fabricated project names like 'Game-Playable Coin.' Users should be educated to verify domain registration dates, SSL certificates, and official branding before interacting with crypto-related sites. Wallet providers are advised to integrate real-time domain reputation checks to prevent transaction signing on flagged sites, reducing the risk of unauthorized asset transfers.